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CLAIMS 

What is claimed is: 

1 . A programmable access device for use in a network access system, said 
programmable access device comprising: 

first and second network interfaces through which packets are 
communicated with a network; 

a packet header filter and a forwarding table, wherein the forwarding 
table is utilized to forward packets between the first and second network 
interfaces, and wherein said packet header filter identifies messages received at 
one of the first and second network interfaces on which policy-based services 
are to be implemented and passes identified messages via a message interface 
to an external processor for processing. 

2. The programmable access device of Claim 1, wherein the packet header 
filter receives packets directly from the first network interface. 

3. The programmable access device of Claim 2, wherein the packet header 
filter is a first packet header filter, and wherein the programmable access 
device further comprises a second packet header filter that receives packets 
directly from the second network interface. 

4. The programmable access device of Claim 1, wherein the packet header 
filter filters packets for service processing based upon protocol information 
pertaining to protocol layers higher than layer 3. 
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5. The programmable access device of Claim 1, and further comprising a 
policer that polices packets by reference to traffic parameters. 

6. The programmable access device of Claim 5, wherein the policer 
comprises a marker that marks packets that do not conform with the traffic 
parameters. 

7. The programmable access device of Claim 1 , and further comprising at 
least a usage monitor that monitors at least one traffic type. 

8. The programmable access device of Claim 7, wherein the usage 
monitor has an associated threshold that when exceeded generates a reporting 
event for the usage monitor. 

9. The programmable access device of Claim 8, and further comprising a 
reporting interface that communicates the reporting event to an external 
processor. 

10. The programmable access device of Claim 9, wherein the associated 
threshold comprises a session activity level threshold. 

1 1 . The programmable access device of Claim 7, and further comprising a 
fault monitor. 
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12. The programmable access device of Claim 1, and further comprising 
one or more output buffers for outgoing packets. 

13. The programmable access device of Claim 12, and further comprising a 
scheduler associated with the one or more output buffers that schedules the 
transmission of outgoing packets within the one or more output buffers. 

14. The programmable access device of Claim 13, wherein the scheduler 
supports multiple quality of service classes. 

15. The programmable access device of Claim 1, and further comprising a 
control interface through which said packet header filter and said forwarding 
table are programmed. 

16. The programmable access device of Claim 15, and further comprising 
at least a programmable monitor that monitors at least one programmed traffic 
type. 

17. The programmable access device of Claim 15, and further comprising a 
policer that polices packets by reference to programmed traffic parameters. 

18. The programmable access device of Claim 15, and further comprising 
one or more output buffers for outgoing packets and an associated scheduler 
that transmits the outgoing packets from the one or more output buffers 
through the second network interface according to a programmed 
methodology. 
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19. The programmable access device of Claim 1, wherein the identified 
message is a session initiation protocol (SIP) message. 

20. The programmable access device of Claim 1, wherein the identified 
message is an Internet Group Multicast Protocol (IGMP) message. 

2 1 . The programmable access device of Claim 1 , wherein the identified 
message is a Resource Reservation Protocol (RSVP) message. 

22. The programmable access device of Claim 1, and further comprising a 
plurality of protocol-specific state machines for a respective plurality of 
protocol types. 

23. The programmable access device of Claim 1, wherein said plurality of 
protocol-specific state machines include a transport control protocol (TCP) 
state machine that, responsive to a control command, provides preferential 
treatment to a particular TCP session. 

24. The programmable access device of Claim 1, and further comprising a 
reporting interface through which the programmable access device reports 
state information for active sessions to an external processor. 

25. The programmable access device of Claim 24, wherein the reporting 
interface reports the state information for an active session in response to 
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allocation of service to a new external service controller. 

26. A method of packet handling in a programmable access device of a 
network access system, said method comprising: 

in response to receiving a series of packet at a first network interface of a 
programmable access device, filtering the series of packets at the programmable 
access device to identify messages upon which policy-based services are to be 
implemented; 

passing identified messages to an external processor for service processing; 

and 

for messages that are not identified, routing packets by reference to a 
forwarding table in the programmable access device and outputting the routed 
packets at a second network interface of the programmable access device. 

27. The method of Claim 26, and further comprising receives packets at the 
packet header filter directly from the first network interface. 

28. The method of Claim 27, wherein the packet header filter is a first 
packet header filter, said method further comprising receiving packets at a 
second packet header filter of the programmable access device directly from 
the second network interface. 

29. The method of Claim 26, wherein filtering comprises filtering packets 
for service processing based upon protocol information pertaining to protocol 
layers higher than layer 3. 
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30. The method of Claim 26, and further comprising policing packets by 
reference to traffic parameters utilizing a policer in the programmable access 
device. 

3 1 . The method of Claim 30, wherein policing comprises marking packets 
that do not conform with the traffic parameters. 

32. The method of Claim 26, wherein the programmable access device 
includes at least a usage monitor, said method further comprising monitors at 
least one traffic type in said series of packets. 

33. The method of Claim 32, wherein the usage monitor has an associated 
threshold, said method further comprising generating a reporting event for the 
usage monitor when the threshold is exceeded. 

34. The method of Claim 33, and further comprising communicating the 
reporting event to an external processor via a reporting interface. 

35. The method of Claim 34, wherein generating a reporting event 
comprises generating a reporting event in response to a session activity level 
threshold. 

36. The method of Claim 32, and further comprising monitoring faults 
utilizing a fault monitor in said programmable access device. 
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37. The method of Claim 26, and further comprising buffering outgoing 
packets in one or more output buffers in said programmable access device. 

38. The method of Claim 37, and further comprising scheduling the 
transmission of outgoing packets within the one or more output buffers to 
support multiple quality of service classes. 

39. The method of Claim 26, and further comprising programming said 
programmable access device through a control interface of said programmable 
access device. 

40. The method of Claim 39, wherein the programmable access device 
further includes at least one programmable monitor, said method further 
comprising monitoring at least one programmed traffic type utilizing said at 
least one programmable monitor. 

41 . The method of Claim 39, wherein said programmable access device 
includes a policer, said method further comprising policing packets by 
reference to programmed traffic parameters. 

42. The method of Claim 39, wherein the programmable access device 
includes one or more output buffers for outgoing packets and an associated 
scheduler, said method comprising transmitting the outgoing packets from the 
one or more output buffers through the second network interface according to a 
programmed methodology. 
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43. The method of Claim 26, wherein the identified message is a session 
initiation protocol (SIP) message. 

44. The method of Claim 26, wherein the identified message is an Internet 
Group Multicast Protocol (IGMP) message. 

45. The method of Claim 26, wherein the identified message is a Resource 
Reservation Protocol (RSVP) message. 

46. The method of Claim 26, and further comprising maintaining in said 
programmable access device a plurality of protocol-specific state machines for 
a respective plurality of protocol types. 

47. The method of Claim 26, wherein said plurality of protocol-specific 
state machines include a transport control protocol (TCP) state machine, and 
wherein the method further comprises providing preferential treatment to a 
particular TCP session by said programmable access device in response to a 
command. 

48. The method of Claim 26, and further comprising reporting state 
information for active sessions to an external processor via a reporting 
interface of the programmable access device. 



49. The method of Claim 48, wherein reporting comprises reporting the state 
information for an active session in response to allocation of service to a new 
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external service controller. 



